$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: xH/S48TQpHeN2wyHvsgx18vFEaFXX4kwa/JTfywR6JI= Subject key identifier: 5A:CF:99:97:9A:A9:5F:47:DB:AD:1B:9A:EE:57:AE:21:CE:82:29:AF Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019A085B981799A609F0A6CE1F1096BB69AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 13A7 Signing time: Tue 21 Oct 2025 20:00:11 +0000 Manifest this update: Tue 21 Oct 2025 20:00:11 +0000 Manifest next update: Wed 22 Oct 2025 20:00:11 +0000 Files and hashes: 1: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (hash: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=) 2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 3: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: N2s6KqnnW9qGglbgsxkDhGmT3aQ.roa (hash: 1ZleteROqD8Qub7BlNQREKgEscTZbJHqZvsJY5lTHPU=) 6: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: Zm4U5AkJLyIiRNQms7Jtd5clZwElW66eLuKskevekrQ=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:5b:98:17:99:a6:09:f0:a6:ce:1f:10:96:bb:69:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Oct 21 20:00:11 2025 GMT Not After : Oct 22 20:00:11 2025 GMT Subject: CN=5acf99979aa95f47dbad1b9aee57ae21ce8229af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:a6:28:5e:7e:92:e0:d8:68:70:09:ca:91: 67:67:5a:47:53:e6:95:08:0b:ff:cd:4c:90:08:e5: b9:f9:93:45:7d:fe:c4:bb:3c:92:89:fd:8d:71:06: b4:69:90:06:6b:9f:53:ed:5a:83:d2:2d:ea:bb:fb: 73:fc:da:c0:0a:0f:55:6c:85:d0:52:b8:12:7b:01: 1a:16:76:5e:34:71:1d:0a:6b:9b:8f:41:c8:87:1a: 22:1f:59:f4:03:8e:d5:0b:51:7a:e9:3f:2b:1e:79: d6:e9:74:6d:5e:9a:86:ba:81:9c:74:75:e8:16:68: 62:fa:c8:a0:96:e5:36:93:20:f1:78:ae:3b:7b:1a: d9:1e:e7:5b:4b:38:e7:ad:32:64:cc:d5:c1:85:13: c9:d1:4b:7d:67:26:b7:62:c9:44:f6:e4:8e:87:7c: 26:79:e9:7d:71:d2:1b:b2:83:d6:11:8d:4c:7d:8e: 33:30:e2:00:a7:42:cc:80:65:5a:a4:d1:e6:d1:e5: 40:d5:1a:a0:fb:69:20:92:c6:f4:9c:7e:b0:84:a8: 46:80:7a:8f:46:58:f8:c0:69:22:6e:12:36:61:f1: 82:9e:42:69:6c:ee:5a:ba:44:f3:da:85:10:08:fd: eb:ae:23:2c:66:84:c1:b7:26:1a:49:73:63:6b:d8: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CF:99:97:9A:A9:5F:47:DB:AD:1B:9A:EE:57:AE:21:CE:82:29:AF X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:76:3b:7c:c0:fc:15:48:5e:37:4a:95:3c:cf:93:da:39:a5: 2a:1c:67:9f:25:e6:e4:ac:30:ca:86:2f:82:b3:bd:1c:ed:fb: 5a:44:0d:bc:56:db:26:5e:4a:11:22:29:29:87:12:ba:78:11: f0:09:cb:72:d0:47:59:56:66:ca:d6:d0:30:30:03:28:af:36: 34:af:15:bd:1a:0c:b9:f4:da:d4:89:ae:87:cb:f4:a0:2d:f7: 89:de:de:5b:30:27:f8:1c:1d:d7:e7:a0:5e:9c:e1:fc:b3:f6: 9b:30:c9:df:22:88:a9:0b:f0:b2:13:5a:fd:6a:95:88:35:63: be:02:b4:6d:fd:2a:cb:9f:99:6b:f2:b9:61:21:bc:d2:ba:02: d2:e0:1d:0b:56:26:07:2b:f6:6e:d1:a0:23:fa:78:55:2f:b6: 12:7c:62:63:07:a9:21:d6:e0:5b:30:29:be:f7:84:8a:99:a8: 25:b2:ae:9d:32:3a:9a:73:64:7f:ea:c3:db:57:90:d6:f6:47: 16:78:7c:4e:7d:b4:5f:0a:74:4e:58:c1:ea:92:eb:d1:94:3b: 7c:e5:9e:16:1b:29:04:62:da:27:ad:e1:7f:9d:ab:1f:84:8c: 7f:6d:50:7e:84:f0:07:d4:e3:f3:22:fd:0c:66:b7:15:cd:08: 0c:1f:75:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIW5gXmaYJ8KbOHxCWu2muMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUxMDIxMjAwMDExWhcNMjUxMDIyMjAwMDExWjAzMTEwLwYDVQQD Eyg1YWNmOTk5NzlhYTk1ZjQ3ZGJhZDFiOWFlZTU3YWUyMWNlODIyOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBimKF5+kuDYaHAJypFnZ1pHU+aV CAv/zUyQCOW5+ZNFff7EuzySif2NcQa0aZAGa59T7VqD0i3qu/tz/NrACg9VbIXQ UrgSewEaFnZeNHEdCmubj0HIhxoiH1n0A47VC1F66T8rHnnW6XRtXpqGuoGcdHXo Fmhi+sigluU2kyDxeK47exrZHudbSzjnrTJkzNXBhRPJ0Ut9Zya3YslE9uSOh3wm eel9cdIbsoPWEY1MfY4zMOIAp0LMgGVapNHm0eVA1Rqg+2kgksb0nH6whKhGgHqP Rlj4wGkibhI2YfGCnkJpbO5aukTz2oUQCP3rriMsZoTBtyYaSXNja9gpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrPmZeaqV9H260bmu5XriHOgimvMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXY7fMD8 FUheN0qVPM+T2jmlKhxnnyXm5KwwyoYvgrO9HO37WkQNvFbbJl5KESIpKYcSungR 8AnLctBHWVZmytbQMDADKK82NK8VvRoMufTa1Imuh8v0oC33id7eWzAn+Bwd1+eg Xpzh/LP2mzDJ3yKIqQvwshNa/WqViDVjvgK0bf0qy5+Za/K5YSG80roC0uAdC1Ym Byv2btGgI/p4VS+2EnxiYwepIdbgWzApvveEipmoJbKunTI6mnNkf+rD21eQ1vZH Fnh8Tn20Xwp0TljB6pLr0ZQ7fOWeFhspBGLaJ63hf52rH4SMf21QfoTwB9Tj8yL9 DGa3Fc0IDB91AA== -----END CERTIFICATE-----Generated at Tue Oct 21 22:42:47 2025 by rpki-client